Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139332e3136302e3234362e302f32332d3234203d3e2030.roa
File:                     3139332e3136302e3234362e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          mcsB2nbzLQ9yrsaQQClbawKDv6wpDb0RWgya8sOQG8g=
Subject key identifier:   52:E6:2D:2D:8E:DB:8A:98:24:EB:34:94:36:4D:FB:CC:99:D0:84:51
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       199F7CBE275D5333028159882658D50671AD296D
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e3136302e3234362e302f32332d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:55:58 +0000
ROA not before:           Fri 03 Mar 2023 15:50:58 +0000
ROA not after:            Fri 01 Mar 2024 15:55:58 +0000
asID:                     0
IP address blocks:        193.160.246.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:9f:7c:be:27:5d:53:33:02:81:59:88:26:58:d5:06:71:ad:29:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Mar  3 15:50:58 2023 GMT
            Not After : Mar  1 15:55:58 2024 GMT
        Subject: CN=52E62D2D8EDB8A9824EB3494364DFBCC99D08451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:15:16:84:88:18:57:5f:c3:4b:e5:86:60:61:
                    9c:d3:e6:08:0a:98:42:74:87:3b:9b:a7:89:cd:79:
                    9f:e0:37:a9:7a:32:de:3e:cb:17:91:45:04:9b:12:
                    60:3d:a2:b6:eb:5c:64:de:2c:4c:e1:5c:8b:a4:99:
                    7b:0c:94:9f:52:af:36:24:f0:ca:ad:8b:0e:8d:c7:
                    e4:57:55:7d:18:fa:9a:df:ab:1a:3d:ea:cc:c8:20:
                    b6:cc:37:11:48:68:38:c9:be:58:02:ec:5f:68:53:
                    27:31:e6:cb:4e:b7:19:84:38:43:d0:54:8b:76:a0:
                    8b:71:5e:34:11:52:75:4f:ab:32:49:c8:6b:8f:ad:
                    91:26:fc:fe:25:27:72:d0:52:94:e0:99:2f:ee:55:
                    d3:3c:2d:37:8b:a5:99:3d:36:dc:c0:bc:db:c9:5d:
                    ea:0e:76:e6:c3:8f:f6:7f:ca:fe:e9:4b:15:f2:45:
                    73:ee:fc:d0:93:86:0a:9c:fa:4c:cc:bc:12:78:3b:
                    bc:88:57:f2:54:4a:01:12:7b:41:10:6d:c3:71:29:
                    3a:02:15:e1:dc:a3:8a:de:05:79:65:cf:0a:4e:8f:
                    10:27:9e:d0:3a:07:b6:13:98:c8:04:49:25:03:0b:
                    aa:4c:d5:e7:9a:e9:ff:d4:85:07:4a:29:f1:42:5a:
                    fe:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E6:2D:2D:8E:DB:8A:98:24:EB:34:94:36:4D:FB:CC:99:D0:84:51
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e3136302e3234362e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.160.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:fe:18:9e:52:03:da:19:f4:d0:5f:43:b8:e3:92:e9:ab:59:
         2e:f1:3e:ab:bd:5f:45:e9:6d:d0:ff:ed:ee:7d:e7:38:68:d3:
         38:8e:b1:82:fd:ec:4a:de:b9:e0:b5:28:7c:ca:a1:07:f8:10:
         98:f4:d5:1c:ce:92:5c:b6:d3:43:17:d8:1c:f6:db:5a:44:e7:
         44:c3:ab:84:49:e5:ae:0c:9b:83:fc:05:ee:3a:bb:77:22:06:
         72:c2:1b:11:bf:98:97:5d:4a:b6:e0:9d:cf:70:a2:ad:c5:21:
         3d:3b:a5:fa:1a:df:49:23:b8:c7:a1:0e:24:12:65:95:0f:1f:
         cb:31:cd:34:d1:a0:09:70:64:8c:f9:79:df:c6:75:47:85:3d:
         b1:2b:a7:3e:e1:ce:89:8f:bc:3f:d3:4f:e6:2a:46:7a:3a:4a:
         c3:8a:f6:3b:a8:40:68:ca:94:1f:1a:66:a6:b4:96:7c:45:fe:
         3c:9b:9f:2e:92:13:1b:d4:cb:ff:bb:4b:32:fc:ad:32:fb:b2:
         24:75:96:e8:63:57:04:c9:ab:f4:d5:1b:1f:5d:b8:b6:74:62:
         24:13:ad:45:02:b2:6c:7b:78:6a:ba:18:45:9d:84:ad:a2:35:
         0f:12:ea:49:74:8a:29:b5:b3:80:40:22:06:cd:07:5d:95:52:
         6e:d9:c9:64
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgIUGZ98viddUzMCgVmIJljVBnGtKW0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRjOTcwNzU1ODI0Y2I5NjdjYWQ2ZjNiOTY0NzA5YjA5
MmQ0MzA2OTAeFw0yMzAzMDMxNTUwNThaFw0yNDAzMDExNTU1NThaMDMxMTAvBgNV
BAMTKDUyRTYyRDJEOEVEQjhBOTgyNEVCMzQ5NDM2NERGQkNDOTlEMDg0NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaFRaEiBhXX8NL5YZgYZzT5ggK
mEJ0hzubp4nNeZ/gN6l6Mt4+yxeRRQSbEmA9orbrXGTeLEzhXIukmXsMlJ9SrzYk
8Mqtiw6Nx+RXVX0Y+prfqxo96szIILbMNxFIaDjJvlgC7F9oUycx5stOtxmEOEPQ
VIt2oItxXjQRUnVPqzJJyGuPrZEm/P4lJ3LQUpTgmS/uVdM8LTeLpZk9NtzAvNvJ
XeoOdubDj/Z/yv7pSxXyRXPu/NCThgqc+kzMvBJ4O7yIV/JUSgESe0EQbcNxKToC
FeHco4reBXllzwpOjxAnntA6B7YTmMgESSUDC6pM1eea6f/UhQdKKfFCWv4TAgMB
AAGjggHrMIIB5zAdBgNVHQ4EFgQUUuYtLY7bipgk6zSUNk37zJnQhFEwHwYDVR0j
BBgwFoAUXclwdVgky5Z8rW87lkcJsJLUMGkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzcvNURDOTcwNzU1ODI0Q0I5NjdDQUQ2RjNCOTY0NzA5QjA5
MkQ0MzA2OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hjbHdkVmdreTVaOHJX
ODdsa2NKc0pMVU1Hay5jZXIwgYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4Zm
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ny8zMTM5MzMyZTMxMzYzMDJlMzIzNDM2MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIw
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHBoPYwDQYJKoZIhvcNAQELBQADggEBAEH+GJ5SA9oZ9NBf
Q7jjkumrWS7xPqu9X0XpbdD/7e595zho0ziOsYL97EreueC1KHzKoQf4EJj01RzO
kly200MX2Bz221pE50TDq4RJ5a4Mm4P8Be46u3ciBnLCGxG/mJddSrbgnc9woq3F
IT07pfoa30kjuMehDiQSZZUPH8sxzTTRoAlwZIz5ed/GdUeFPbErpz7hzomPvD/T
T+YqRno6SsOK9juoQGjKlB8aZqa0lnxF/jybny6SExvUy/+7SzL8rTL7siR1luhj
VwTJq/TVGx9duLZ0YiQTrUUCsmx7eGq6GEWdhK2iNQ8S6kl0iim1s4BAIgbNB12V
Um7ZyWQ=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org